# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-49184.md)
  `CVE-2026-49184` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows DHCP Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49181.md)
  `CVE-2026-49181` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-49180.md)
  `CVE-2026-49180` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Path traversal
- [Windows Active Directory Domain Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-49178.md)
  `CVE-2026-49178` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [DHCP Server Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-48564.md)
  `CVE-2026-48564` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Push Notifications Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-44800.md)
  `CVE-2026-44800` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40378.md)
  `CVE-2026-40378` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Windows Secure Channel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-44806.md)
  `CVE-2026-44806` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Windows Event Logging Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-34348.md)
  `CVE-2026-34348` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-693
- [Windows PowerShell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40400.md)
  `CVE-2026-40400` · CVE record: Microsoft PowerShell 7.5 and 4 more · CVSS 8.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Path traversal
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-41087.md)
  `CVE-2026-41087` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-40422.md)
  `CVE-2026-40422` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Audio Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-34328.md)
  `CVE-2026-34328` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-33842.md)
  `CVE-2026-33842` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-58640.md)
  `CVE-2026-58640` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.3 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Narrator Braille Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-58635.md)
  `CVE-2026-58635` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection
- [Windows Kernel Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-58614.md)
  `CVE-2026-58614` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-58610.md)
  `CVE-2026-58610` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-58609.md)
  `CVE-2026-58609` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Print Spooler Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-58608.md)
  `CVE-2026-58608` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Windows Kernel-Mode Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-58602.md)
  `CVE-2026-58602` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability](https://agentprime.io/advisories/CVE-2026-58601.md)
  `CVE-2026-58601` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-58526.md)
  `CVE-2026-58526` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-57979.md)
  `CVE-2026-57979` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Domain Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-57976.md)
  `CVE-2026-57976` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft XML Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-57097.md)
  `CVE-2026-57097` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-426
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54127.md)
  `CVE-2026-54127` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-50694.md)
  `CVE-2026-50694` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Active Directory Federation Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-56155.md)
  `CVE-2026-56155` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-1220
- [Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-55144.md)
  `CVE-2026-55144` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-325
- [Windows GDI+ Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54122.md)
  `CVE-2026-54122` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54995.md)
  `CVE-2026-54995` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-55003.md)
  `CVE-2026-55003` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54999.md)
  `CVE-2026-54999` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition
- [Windows SMB Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-54997.md)
  `CVE-2026-54997` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-54119.md)
  `CVE-2026-54119` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54996.md)
  `CVE-2026-54996` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, Race condition
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54114.md)
  `CVE-2026-54114` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54982.md)
  `CVE-2026-54982` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54109.md)
  `CVE-2026-54109` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54992.md)
  `CVE-2026-54992` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Print Configuration Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-55004.md)
  `CVE-2026-55004` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54112.md)
  `CVE-2026-54112` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Active Directory Domain Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-55001.md)
  `CVE-2026-55001` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Weak cryptography or TLS
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54993.md)
  `CVE-2026-54993` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54986.md)
  `CVE-2026-54986` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54107.md)
  `CVE-2026-54107` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54991.md)
  `CVE-2026-54991` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, Race condition
- [Universal Print Management Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54111.md)
  `CVE-2026-54111` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, Race condition
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-55000.md)
  `CVE-2026-55000` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50697.md)
  `CVE-2026-50697` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54990.md)
  `CVE-2026-54990` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50696.md)
  `CVE-2026-50696` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Overlay Filter Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54987.md)
  `CVE-2026-54987` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54989.md)
  `CVE-2026-54989` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54129.md)
  `CVE-2026-54129` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Federation Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50695.md)
  `CVE-2026-50695` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Federation Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-54983.md)
  `CVE-2026-54983` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Windows App Store Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49784.md)
  `CVE-2026-49784` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Windows TCP/IP Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-49177.md)
  `CVE-2026-49177` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI2LTA3LTE0VDE3OjA0OjMzLjIyNDAwMFoiLCJDVkUtMjAyNi00OTE3NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI2LTA3LTE0VDE3OjA1OjUwLjIwNzAwMFoiLCJDVkUtMjAyNi00OTE4MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI2LTA3LTE0VDE3OjA1OjUwLjIwNzAwMFoiLCJDVkUtMjAyNi00OTE4MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.
